Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa
File: Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa (raw, json)
Hash identifier: FQCHFVQrQ1NEC98r6LFXm4gOoSIAgwMQTWazYGx2XGQ=
Subject key identifier: 42:F6:FE:F5:41:32:6D:58:C9:C0:C2:57:FD:34:21:CD:B4:F2:0B:A0
Certificate issuer: /CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Certificate serial: 0199DD3268E902E42ADDDAD15B5CDBAF7583
Authority key identifier: 2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa
Signing time: Mon 13 Oct 2025 10:51:32 +0000
ROA not before: Mon 13 Oct 2025 10:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205783
IP address blocks: 185.200.48.0/24 maxlen: 24
185.200.49.0/24 maxlen: 24
185.200.50.0/24 maxlen: 24
185.200.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.mft
rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:32:68:e9:02:e4:2a:dd:da:d1:5b:5c:db:af:75:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d78e4ae0eb9dcac625d9106ce885c5b498075d7
Validity
Not Before: Oct 13 10:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f6fef541326d58c9c0c257fd3421cdb4f20ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:28:39:c1:50:33:42:c1:43:67:bb:3d:1c:
e1:b9:59:96:7c:9f:18:2b:bf:4a:30:7b:4a:da:b6:
76:f8:99:be:6d:21:b6:0b:59:23:a8:ba:94:6f:b8:
02:0b:72:9b:01:a0:3d:f5:14:01:39:bb:0f:13:07:
30:8b:67:47:d1:00:01:40:06:c5:9d:73:13:1f:44:
df:e3:c7:ba:16:fa:7c:7e:f3:e3:7d:97:dc:84:53:
ce:e2:8e:a2:e7:d6:e3:9c:8f:12:fc:27:86:92:90:
9a:ab:14:de:33:a8:46:66:94:41:38:3f:32:00:93:
b3:35:cd:53:32:bb:a2:83:97:0b:08:92:50:48:21:
71:5c:a2:6d:66:8d:9e:0c:64:2b:7a:ef:e8:af:8a:
74:f8:91:be:ea:63:74:3a:67:ca:76:77:a4:c7:8b:
73:7e:8d:19:07:86:a7:26:29:bc:48:8b:a6:76:f0:
86:e2:85:8a:07:a7:24:8b:ce:41:cf:03:bb:6d:ac:
77:7f:81:1c:ee:6b:1e:c3:19:98:36:f0:66:e6:69:
85:a1:fe:fa:5d:fd:47:49:28:88:d0:21:9e:4a:06:
32:de:51:99:88:7e:ce:e2:1d:0d:5c:7e:f0:e8:d1:
b6:4d:46:81:e0:25:e3:33:0c:74:0b:f8:de:b6:b0:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:FE:F5:41:32:6D:58:C9:C0:C2:57:FD:34:21:CD:B4:F2:0B:A0
X509v3 Authority Key Identifier:
keyid:2D:78:E4:AE:0E:B9:DC:AC:62:5D:91:06:CE:88:5C:5B:49:80:75:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXjkrg653KxiXZEGzohcW0mAddc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/Qvb-9UEybVjJwMJX_TQhzbTyC6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/528b31-42c9-4629-a45d-f6567552605e/1/LXjkrg653KxiXZEGzohcW0mAddc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.48.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:18:47:69:b9:c2:5d:6a:6a:27:d3:b7:f9:e1:a8:16:15:bd:
0f:b0:2a:89:91:af:7d:59:5a:89:96:57:3b:67:29:25:1a:e6:
42:57:3f:1e:08:67:ff:66:45:bc:01:e7:11:4f:6f:89:5e:38:
de:43:4b:c5:98:18:2d:98:50:d6:0a:56:aa:fd:23:8f:1f:6d:
d3:8d:cb:14:c8:d2:bb:51:54:e9:b7:5b:7f:e4:ac:b4:89:25:
a0:9f:bf:6a:58:43:4d:bd:d8:99:8f:65:24:d1:9b:9f:88:5c:
0d:6f:4f:f0:21:2a:b6:e6:46:13:2b:1a:91:28:a7:32:da:80:
6c:ac:ac:57:16:b3:be:eb:9b:13:6c:34:29:a3:59:1f:99:d3:
b0:38:50:9a:7b:36:26:5a:80:42:e4:76:1e:21:57:00:39:8e:
aa:36:1c:0a:c0:98:27:39:e1:bd:1a:8e:07:cd:bd:00:2c:17:
73:7a:45:47:2c:ef:e4:b4:3a:c3:93:ca:a9:28:c7:13:34:d9:
3c:ec:10:d4:49:2b:3d:7d:99:fb:c9:2f:45:72:68:b5:fa:25:
92:05:94:86:54:5c:4c:49:8c:16:5b:70:a9:61:96:66:cd:c7:
96:da:d9:67:06:3e:ee:2f:ee:c9:40:2e:97:df:8e:b4:e2:31:
15:18:3b:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZndMmjpAuQq3drRW1zbr3WDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNzhlNGFlMGViOWRjYWM2MjVkOTEwNmNlODg1YzViNDk4
MDc1ZDcwHhcNMjUxMDEzMTA1MTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmY2ZmVmNTQxMzI2ZDU4YzljMGMyNTdmZDM0MjFjZGI0ZjIwYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z8oOcFQM0LBQ2e7PRzhuVmWfJ8Y
K79KMHtK2rZ2+Jm+bSG2C1kjqLqUb7gCC3KbAaA99RQBObsPEwcwi2dH0QABQAbF
nXMTH0Tf48e6Fvp8fvPjfZfchFPO4o6i59bjnI8S/CeGkpCaqxTeM6hGZpRBOD8y
AJOzNc1TMruig5cLCJJQSCFxXKJtZo2eDGQreu/or4p0+JG+6mN0OmfKdnekx4tz
fo0ZB4anJim8SIumdvCG4oWKB6cki85BzwO7bax3f4Ec7msewxmYNvBm5mmFof76
Xf1HSSiI0CGeSgYy3lGZiH7O4h0NXH7w6NG2TUaB4CXjMwx0C/jetrDo9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEL2/vVBMm1YycDCV/00Ic208gugMB8GA1UdIwQY
MBaAFC145K4OudysYl2RBs6IXFtJgHXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQt
ZjY1Njc1NTI2MDVlLzEvUXZiLTlVRXliVmpKd01KWF9UUWh6YlR5QzZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81MjhiMzEtNDJjOS00NjI5LWE0NWQtZjY1Njc1NTI2MDVl
LzEvTFhqa3JnNjUzS3hpWFpFR3pvaGNXMG1BZGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucgwMA0G
CSqGSIb3DQEBCwUAA4IBAQBPGEdpucJdamon07f54agWFb0PsCqJka99WVqJllc7
ZyklGuZCVz8eCGf/ZkW8AecRT2+JXjjeQ0vFmBgtmFDWClaq/SOPH23TjcsUyNK7
UVTpt1t/5Ky0iSWgn79qWENNvdiZj2Uk0ZufiFwNb0/wISq25kYTKxqRKKcy2oBs
rKxXFrO+65sTbDQpo1kfmdOwOFCaezYmWoBC5HYeIVcAOY6qNhwKwJgnOeG9Go4H
zb0ALBdzekVHLO/ktDrDk8qpKMcTNNk87BDUSSs9fZn7yS9Fcmi1+iWSBZSGVFxM
SYwWW3CpYZZmzceW2tlnBj7uL+7JQC6X34604jEVGDuy
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:24:16 2025 by rpki-client